A company installed cameras and added signs to alert visitors that they are being recorded. Which of the following controls did the company implement? (Choose two.)

Question

Options

• ADirective
• BDeterrent
• CPreventive
• DDetective
• ECorrective
• FTechnical

• A
  2% (1)
• B
  70% (32)
• C
  13% (6)
• E
  11% (5)
• F
  4% (2)

Explanation

Cameras and signs together implement both deterrent and detective controls.

Why B (Deterrent) and D (Detective) are correct: The posted signs warning visitors about recording deter potential bad actors - knowing they're being watched discourages misconduct before it happens. The cameras themselves are detective controls because they record activity, enabling identification and investigation of incidents after they occur. Neither stops a threat directly; one discourages it, one captures evidence of it.

Why the distractors are wrong:

• A (Directive): Directive controls are policies, rules, or instructions that mandate behavior (e.g., an acceptable use policy) - not surveillance hardware or warning signs.
• C (Preventive): Preventive controls physically or logically block an action (locks, firewalls). Cameras and signs don't stop anyone from walking through the door or committing an act.
• E (Corrective): Corrective controls restore systems or fix damage after an incident (backups, patches). Cameras play no corrective role.
• F (Technical): "Technical" describes a control's implementation category (software/hardware-based), not its functional type. The question asks what function the controls serve, not how they're implemented.

Memory tip: Think "Signs DETER, cameras DETECT" - the sign scares people off before the act, the camera catches evidence of the act. Preventive controls are the ones that actually block the act entirely.

No community discussion yet for this question.